WP Affiliate Disclosure

WP Affiliate Disclosure has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2023; all 4 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (75%). Other recurring categories include Cross-Site Scripting.

Every one of the 4 issues recorded for WP Affiliate Disclosure has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. WP Affiliate Disclosure is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Affiliate Disclosure vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update

Read the full analysis

Vulnerability Records

4 records


2023-12-29 00:00	WP Affiliate Disclosure <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via $id WP Affiliate Disclosure <= 1.2.7	`CVE-2023-52178`	6.4 Medium	resecured.io	Yes
2023-11-03 00:00	WP Affiliate Disclosure <= 1.2.6 - Cross-Site Request Forgery via check_capability WP Affiliate Disclosure <= 1.2.6	`CVE-2023-47232`	4.3 Medium	Abdi Pranata	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks WP Affiliate Disclosure < 1.2.3	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes
2019-02-25 00:00	Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update WP Affiliate Disclosure < 1.1.4	`N/A`	8.8 High	Anonymous	Yes

Showing 1–4 of 4 reports

Latestv1.4.0

WP Affiliate Disclosure

Author

mojofywp

5.0(1)

100/100

Last Updated

2026-05-03 (4mo ago)

Active Installs

1,000+

Downloads

37,839

Requires WP

5.8+

Requires PHP

7.4+

Tested up to

WP 6.7.7

Created

2018-11-15 (8y ago)

Live Demo: https://www.mojofywp.com/wp-affiliate-disclosure/demo If you’re an affiliate marketer, blogger, or website owner, and you’re promoting products of companies from US, UK, or Canada, the FTC (Federal Trade Commission) requires you to tell your visitors that you will be compensated if they purchase something through your affiliate link(s). However, adding the disclosure statement manually into each posts would be a hassle – But worries no more… WP Affiliate Disclosure allows you to add a customizable, FTC-compliant disclosure statement that will automatically display across your WordPress website based on the rule(s) you define. Main features: Show the disclosure statement at the beginning and/or the end of a post. Easily customize statement content, including adding in links, images, as well as HTML elements. Only show the disclosure statement on certain posts. Only show the disclosure statement based on its taxonomies ( categories / tags ) Works on custom post type as well Live Demo: https://www.mojofywp.com/wp-affiliate-disclosure/demo

View on WordPress.org